Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: aD1ZEvkBghv5PblS5ix8h1XaA7cZwdlSR0fMg9JGyn0=
Subject key identifier: B3:95:78:FF:CC:6E:92:44:C8:69:07:6B:A4:B3:2F:E6:EE:98:0B:FA
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 01A0DC853DBFC8B5FE400E44E25A183E45C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 07:01:54 +0000
Manifest this update: Sat 26 Sep 2026 07:01:54 +0000
Manifest next update: Sun 27 Sep 2026 07:01:54 +0000
Files and hashes: 1: bVyEsAAvKQpoixKzifb7SAIwq1U.asa (hash: Hhp/2raaHt+BHUMvrNvJ13U1em+DJrRPvGuzd1hW10U=)
2: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
3: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: d9FvRASghotW76vKq9o7Yfe/3VaUfsVYizc2tQSlrl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:3d:bf:c8:b5:fe:40:0e:44:e2:5a:18:3e:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Sep 26 07:01:54 2026 GMT
Not After : Sep 27 07:01:54 2026 GMT
Subject: CN=b39578ffcc6e9244c869076ba4b32fe6ee980bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:06:b5:98:ac:7b:64:a8:cf:27:ed:91:f0:
a3:38:a8:e7:bd:06:f1:c5:a2:14:58:f3:bc:b1:bc:
bd:75:cf:ed:71:6a:5a:57:b4:44:b4:81:b1:d3:d3:
0c:a0:25:a1:c5:2d:dd:36:a3:5e:c6:25:51:7b:c2:
39:ca:49:34:02:81:63:b1:1a:1d:ba:a0:6a:91:a9:
af:6c:6b:21:c9:61:fd:98:85:74:6c:c7:c7:a9:e5:
8b:4a:62:3e:76:0c:02:49:df:65:bf:ca:ab:68:5f:
e4:86:49:fc:c0:fd:ed:43:de:d7:bf:e5:2c:b4:1a:
3a:5b:05:cd:71:b6:47:24:06:11:47:8e:35:4e:37:
f4:62:80:24:98:6e:b6:36:8e:0f:e6:79:3e:71:a3:
ec:75:a7:0f:d9:8e:5a:91:82:a4:c7:9c:54:1e:52:
8d:39:1a:1f:29:1e:d7:46:ce:f2:b3:f2:43:0d:fa:
ad:3a:b6:4e:05:ad:bd:91:1b:3d:cc:25:49:0e:0a:
f3:46:45:be:92:73:c3:e5:c0:59:c3:be:dc:29:d6:
b8:58:11:e8:b9:2a:2f:f5:30:45:c2:da:87:fb:10:
57:1b:20:1d:29:23:d4:42:84:0d:90:8f:57:72:db:
01:e9:a5:0e:3e:cd:a5:19:45:74:13:6d:7e:7d:01:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:95:78:FF:CC:6E:92:44:C8:69:07:6B:A4:B3:2F:E6:EE:98:0B:FA
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:f5:43:f2:5f:5e:d3:e1:19:79:2a:bd:9e:37:66:49:02:
0d:c0:13:d8:59:77:f1:6a:cb:ed:10:87:0a:f9:1b:ad:2a:78:
93:ce:b5:18:09:5e:11:d2:88:d3:a4:d7:7d:3e:74:22:4a:80:
0a:82:26:0e:07:7f:9d:b9:10:a2:f6:18:3b:29:ab:3a:34:39:
78:fc:78:0a:35:6c:67:69:a0:e5:83:5d:f0:15:f1:64:ee:8d:
01:2f:41:52:f5:ed:de:92:3f:47:e6:c5:b2:0e:9a:eb:89:fe:
f7:ed:05:02:e0:ee:4d:61:31:3f:07:64:3f:31:0d:99:5b:9f:
3f:bc:37:98:7c:d4:2e:63:5e:6d:88:94:c8:46:09:e3:99:08:
0d:53:8e:be:dc:3d:3c:86:63:3e:be:b6:b3:75:70:b4:fd:94:
58:24:aa:33:1d:c2:55:0e:da:48:b5:18:5a:ea:27:09:f5:e8:
16:72:81:8e:70:12:2c:98:66:68:24:c6:0e:7a:e7:78:87:1e:
64:32:6c:7a:83:a5:e2:52:5f:33:d9:fd:95:ac:d1:b3:4d:4e:
33:46:2e:d2:a2:fc:26:b3:57:e0:8f:8c:96:e0:97:75:0d:e4:
10:0f:da:ba:62:0a:0b:a1:cc:4e:c9:e3:9b:e6:86:80:04:36:
a0:dd:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:21 2026 by rpki-client